From: Irfan Ali (irfan.ali@nsp.org.pk)
Date: Thu Jan 31 2008 - 03:20:42 ARST
Port Security can be configured on Access port as well as Trunk port, only
with the exception that it does not support dynamic behavior where DTP comes
into the picture.
One should make the port Static Access or Static Trunk.
Port Security Configuration Guidelines
Follow these guidelines when configuring port security:
. Port security can only be configured on static access ports or trunk
ports. A secure port cannot be a dynamic access port.
Reference:
Search for : "Port security can only be configured on"
http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/1
2.2_25_see/configuration/guide/swtrafc.html#wp1038546
Hope this help.
Regards
Irfan Ali
CCIE#19715
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
shiran guez
Sent: Wednesday, January 30, 2008 10:54 AM
To: keith tokash
Cc: ccielab@groupstudy.com
Subject: Re: DTP vs port-security
DTP = Dynamic Trunking Protocol
Port Security work only on ACCESS ports so it do not support and do not need
to support DTP, you must set the interface statically to Access Mode and
preferably also turn off the DTP with "Switchport nonegotiate"
On Jan 29, 2008 7:23 AM, keith tokash <ktokash@hotmail.com> wrote:
> I get that port-security is incompatible with DTP, so one must manually
> specify the interface mode. But I can't find anything relating why that's
> the
> case. I don't know, maybe I'm a doof, but I don't see a clear connection.
> Can anyone help a fella who's down on his luck?
>
> With a few exceptions, secrecy is deeply incompatible with democracy and
> with
> science.
> --Carl Sagan
> _________________________________________________________________
> Climb to the top of the charts! Play the word scramble challenge with star
> power.
> http://club.live.com/star_shuffle.aspx?icid=starshuffle_wlmailtextlink_jan
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
-- Shiran Guez MCSE CCNP NCE1 http://cciep3.blogspot.com http://www.linkedin.com/in/cciep3
This archive was generated by hypermail 2.1.4 : Sat Mar 01 2008 - 16:54:47 ARST